Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32342d3332203d3e20323731323933.roa
File:                     3137302e3233332e3234302e302f32342d3332203d3e20323731323933.roa (raw, json)
Hash identifier:          eFnOP7RT7DEemjk/zniGi0JLI3CUdzeLQGxsHLdV6cU=
Subject key identifier:   F9:61:9F:2E:13:31:70:34:21:1D:9F:1A:65:67:37:9A:BC:2B:41:A8
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       1B58B28093F25C425C0484AC2F51694F66581DB8
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32342d3332203d3e20323731323933.roa
Signing time:             Tue 21 May 2024 16:53:39 +0000
ROA not before:           Tue 21 May 2024 16:48:39 +0000
ROA not after:            Tue 20 May 2025 16:53:39 +0000
asID:                     271293
IP address blocks:        170.233.240.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Tue 20 May 2025 16:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:58:b2:80:93:f2:5c:42:5c:04:84:ac:2f:51:69:4f:66:58:1d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: May 21 16:48:39 2024 GMT
            Not After : May 20 16:53:39 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:ef:4f:bb:67:a3:ae:46:c7:e8:cc:78:9b:
                    1d:bb:99:08:b8:b7:84:09:3c:8c:dc:ac:44:39:1b:
                    d2:99:19:68:ab:bd:a7:60:bb:b4:f9:8b:22:45:fa:
                    1e:6a:01:12:76:67:9d:99:d4:07:be:b3:6b:4d:14:
                    88:bf:d0:43:00:af:63:dd:6c:66:c3:eb:e3:28:42:
                    89:38:b3:e5:b2:70:e9:6e:8f:6d:b6:0b:a3:e3:de:
                    d1:23:60:09:a3:6c:1f:ba:21:59:c6:ac:13:73:a3:
                    ea:1f:20:23:01:e9:9c:d0:14:f8:be:0e:fd:70:69:
                    66:aa:8f:62:9d:97:40:14:a6:e4:35:cd:c3:7d:96:
                    1d:88:c9:4a:8d:9e:15:fc:0d:ed:8c:71:86:09:68:
                    a4:21:d1:60:b9:54:68:e1:d1:f1:d8:97:d7:51:de:
                    b9:d0:fa:94:87:74:da:2c:6a:3a:2c:32:54:96:66:
                    a0:f7:88:8e:9f:9e:39:e3:02:43:46:d4:a3:78:43:
                    94:03:6f:a5:5f:fc:38:60:b3:25:c8:62:1d:39:fe:
                    27:04:3c:a5:fc:f6:4e:a5:68:80:f2:30:01:b0:87:
                    dc:2c:3b:73:29:1a:5d:64:3f:1d:49:f3:1e:63:fc:
                    84:11:fb:95:ff:72:10:fd:47:ac:22:12:82:0e:4a:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:61:9F:2E:13:31:70:34:21:1D:9F:1A:65:67:37:9A:BC:2B:41:A8
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32342d3332203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e7:a7:d8:59:45:64:fb:6f:0b:30:06:82:e3:fe:9e:46:29:
         c2:94:91:1a:89:7d:5a:86:73:f6:68:1d:24:4a:47:ea:00:95:
         6a:09:d8:1d:5f:64:9b:d6:30:54:af:8d:20:2b:bc:d0:e5:9f:
         0f:82:6e:2a:f9:32:34:7a:b9:42:0e:3d:42:43:75:bf:db:cd:
         7a:3b:9e:cf:98:db:90:0f:9c:71:20:b8:e5:6c:23:6d:20:67:
         dd:97:bc:8c:c7:ca:47:38:44:9c:88:cf:f3:d6:ff:ec:66:a0:
         ec:a2:ed:64:7a:1e:f3:97:98:84:a2:b7:10:c9:67:52:41:30:
         08:20:7d:b3:5e:ee:12:20:6d:98:b7:d8:b4:f5:e3:aa:73:7d:
         f1:e5:72:6d:e0:bc:26:cc:20:3b:50:b6:c9:74:49:0d:0e:b0:
         25:33:09:9b:a3:fe:e5:8f:d0:fb:20:84:97:1a:de:94:7e:85:
         44:78:f6:cc:65:dc:bc:aa:d4:7e:14:34:bf:2d:2c:8e:a6:fc:
         ea:ec:09:74:5a:21:e4:d4:28:28:56:5d:9b:c6:8a:1d:f1:a7:
         fe:cc:a5:a8:1b:9e:1c:14:07:ce:3f:98:8c:11:02:14:74:37:
         51:81:fe:c0:a8:87:2e:f0:e8:ae:56:c4:25:79:a6:8f:a1:e8:
         e8:78:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:12:39 2025 by rpki-client